Trust center

How NorthFirn scopes websites and technical work

Plain-language boundaries for website design, online stores, custom builds, assessments, implementation, recovery testing, evidence, automation, and third-party systems.

What a website tier covers

Each website tier covers the pages, sections, products, features, and change rounds listed for it on the pricing page and in your written confirmation. Anything outside that list, such as extra pages, extra products, custom integrations, or copywriting on tiers that don't include it, is quoted before it starts. NorthFirn builds everything short of enterprise sites; projects needing formal procurement, many internal approvers, or a compliance program are outside scope.

Search, traffic, and sales

NorthFirn sets up page titles, descriptions, structure, and a Google Business Profile link where included. It does not guarantee search rankings, traffic, leads, conversions, or sales, which depend on factors outside the site, including your market, reviews, advertising, and search engine decisions.

Online stores and payments

Stores run on a platform such as Shopify or WooCommerce, and card payments are processed by a payment provider such as Shopify Payments, Stripe, Square, or PayPal. NorthFirn does not receive or store your customers' card details. You remain responsible for the products you sell, your prices, sales tax registration and collection settings, shipping and return policies, age or product restrictions, and the legal notices your business needs. NorthFirn sets up the options you choose and can point out common gaps; it does not give tax or legal advice.

Accessibility and browser support

NorthFirn designs to WCAG 2.2 Level AA and checks contrast, keyboard use, and screen-reader basics before launch. Content you add later, third-party embeds such as booking widgets, and platform apps can introduce barriers NorthFirn does not control. Sites are tested on current versions of Chrome, Safari, Edge, and Firefox on desktop and phone.

Platforms, hosting, and outside services

Hosting companies, store platforms, domain registrars, booking tools, email providers, and apps remain responsible for their own uptime, pricing, and terms, and may change them after launch. Free hosting tiers have usage limits; a site that outgrows them may need a paid plan. NorthFirn can recommend and set up these services but is not liable for their outages or policy changes.

After launch

Software updates, backups, uptime checks, and content changes after launch are included only with a care plan or a separate agreement. Without one, the site keeps running as delivered, and updates are done on request at the published hourly rate.

Scope and authorization

Each engagement names the systems, locations, products, data, changes, test methods, evidence, timing, and people included. NorthFirn relies on authorized access and information supplied by the client. Production changes and disruptive tests require explicit approval and an agreed change plan.

The client keeps control of its accounts

NorthFirn does not need a permanent copy of ordinary client passwords. The engagement defines who operates each console, how temporary access is granted, what actions require approval, and how access is removed after the work.

What a test result means

A recovery result applies to the selected backup set, system, date, method, destination, validation checks, and conditions recorded in the report. Untested systems, hidden dependencies, later changes, vendor outages, and future incidents remain outside that observation.

Systems still need owners

The client remains responsible for business decisions, licensing, staff access, required approvals, safe operating windows, and information about its environment. Open findings need a named owner and a follow-up date.

Insurance, legal, audit, and compliance decisions

NorthFirn provides technical findings and dated evidence. Unless separately licensed and engaged, NorthFirn does not provide legal or insurance advice, interpret policy coverage, issue an audit opinion, or certify compliance. Clients approve their own statements to carriers, brokers, auditors, regulators, and other third parties.

Third-party products and services

Cloud platforms, carriers, software vendors, storage providers, identity systems, and other client suppliers remain responsible for their own products and availability. NorthFirn can document a dependency or help manage a vendor issue within scope.

Ongoing monitoring and emergency response

Recovery systems change after delivery. Recurring monitoring, testing, remediation, incident response, and after-hours support are included only when the service agreement says so. Ordinary contact or project work does not create 24/7 emergency coverage.